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IN THE CLAIMS : 



Amended claims follow. 




1 



(Currently Amended) A method for tracing a traffic event utilizing a fiiewall, 
comprising: 

executing a firewall on a local computer; 

(b) \ monitoring traffic events between the local computer and a remote computer 
ver a network utilizing the firewall; 

(c) di^laying the traffic events utilizing the firewall; 

(d) tracing at least one of the traffic events utilizing the firewall; and 

(e) displaying a world map with an illustration of the trace thereon u tilizing the 
firewall. 



2. (Origiiml) The method as recited in claim 1, wherein the traffic events are 
displayed in an evetat log. 



3. (Original) The method assrecited in claim 2, wherein the event log identifies 
a time and an Internet Protwpl (IP) address associated with the traffic events. 

4. (Original) The method as recited ui claim 2, wherein the traffic events are 
organized based on times the traffic ewnts are logged. 

5. (Original) The method as recited in claim ZMvherein the traffic events 
include attempts to access the local computer. 

6. (Original) The method as recited in claim 1, whereiirt|ie at least one traffic 
event is traced in response to a user request. 

7. (Original) The method as recited in claim 1, wherein the tracing includes 
identifying a plurality of network segments traversed by the trafflts event 
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y8. (Original) The method as recited in claim 7, wherein the map includes the 
network segments. 

{Currently Amended) The method as recited in claim 8, and further 
^mprising displaying a plurality of view s of the map . 




1 0. (Original) The method as recited in claim 9, wherein a geographical location 
of the\etwork segments is displayed upon the selection of a first one of the 
views. 

1 1 . (Original) The method as recited in claim 1 0, wherein nodes of the network 
segments are mspiayed upon the selection of a second one of the views, 

12. (Original) The meOiod as recited in claim 1 1, wherein a list of the network 
segments are displayed upon the selection of a third one of the views. 



(Currently Amended) ANcomputer program product for tracing a traffic event 
utilizing a firewall, compiTsing: 

computer code for executingsa firewall on a local computer; 
computer code for monitoring Vaffic events between the local computer and 
a remote computer over a netwonc utilizing the firewall; 
computer code for displaying the ttaffic events utilizing the firewall; 
computer code for tracing at least ori^ of the traffic events utilizing the 
firewall; and 

computer code for displaying a world m\p with an illustration of the trace 



13. 

(a) 
(b) 

(c) 
(d) 

(e) 

thereon u tilizing the firewall. 



1 4. (Original) The computer program product as i^ited in claim 1 3, wherein the 
traffic events are displayed in an event log. 

1 5. (Original) The computer program product as reciteoyin claim 14, wherein the 
event log identifies a time and an Internet Protocol (IJQ address associated 
with the traffic events. 
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1 6\ (Original) The computer program product as recited in claim 14, wherein the 
traffic events are organized based on times the traffic events are logged. 



17. ^Original) The computer program product as recited in claim 14, wherein the 
; events include attempts to access the local computer. 



tic I 




18. (Origmal) The computer program product as recited in claim 13, wherein the 
at least ooie traffic event is traced in response to a user request. 

19. (Original) l^e computer program product as recited in claim 13, wherein the 
tracing inclua^^s identiiyijig a plurality of network segments traversed by the 
traffic event. 

20. (Original) The computer program product as recited in claim 19, wherein the 
map includes the network segments. 



21 . (Currently Amended) ThCyComputer program product as recited in claim 20, 
and further comprising comiputer code for displaying a plurality of views-^ 
th e map . 

22. (Original) The computer prograinyproduct as recited in claim 21 , wherein a 
geographical location of the network segments is displayed upon the 
selection of a first one of the views. 

23. (Original) The computer program product as recited in claim 22, wherein 
nodes of the network segments are displayed upon the selection of a second 
one of the views. 

24. (Original) The computer program product as reiated in claim 23, wherein a 
list of the network segments are displayed upon tt^e selection of a third one 
of the views. 
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(3 



(Currently Amended) A system for tracing a traffic event utilizing a firewall, 

comprising: 

logic for executing a firewall on a local computer; 

3gic for monitoring traffic events between the local computer and a remote 
computer over a network utilizing the firewall; 
lo^ for displaying the traffic events utilizing the firewall; 
logic Vor tracing at least one of the traffic events utilizing the firewall; and 
logic for displaying a world map with an illustration of the trace thereon 



25. \ 

(a) 
(b) 

(c) 
(d) 
(e) 

utilizing the fireValL 



26. (Currently Apiended) A method for tracing a traffic event utilizing a firewall^ 
comprising: 

(a) executing a fireVall on a local computer; 

(b) monitoring traffic\events between the local computer and a remote computer 
over a network utilising the firewall; 

(c) displaying the traffic Wents utilizing the firewall; 

(d) tracing at least one of me traffic events utilizing the firewall; 

(e) displaying a geographicail location of a plurality of network segments 
associated with the traffic Went on a world map u pon the selection of a first 
one of a plurality of views utilizing the firewall; 

(f) displaying a plurality of nodesSof the network segments upon the selection of 
a second one of the views utilizifig the firewall; and 

(g) displaying a list of the network segpients upon the selection of a third one of 
the views utilizing the firewall 



27. (Currently Amended) A method for tracrqg a traffic event utilizing a firewall, 
comprising: 

(a) executing a firewall on a local computer; 

(b) monitoring trafSc events between the local coiijputer and a remote computer 
over a network utilizing the firewall; 

(c) logging the traffic events in an event log utilizing\he firewall, wherein the 
event log identifies a time and an Internet Protocol (^P) address associated 
with the traffic events; 
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1) organizing the traffic events in the event log based on times the traffic events 
are logged utilizing the firewall; 

displaying the traffic events in the event log utilizing the firewall; 
detecting the selection of one of the traffic event by a user; 
tracing at least one of the traffic events utilizing the firewall upon the 
election thereof, wherein the tracing identifies a plurality of network 
lents traversed by the traffic event; 

(h) det«;ting the selection of one of a plurality of views by the user, and 

(i) displWing the network segments in the selected view upon the selection of 
one ofihe views , wherein one of the views includes a world map with an 
illustration of a trace thereon . 

28. (Currently Ainended) A method for geographically tracing a traffic event 
utilizing a personal firewall, comprising: 

monitoriM traffic events between a local computer and a remote 
computer over a nVwork utihzing a personal firewall; 

displaying tHe traffic events in an event log utilizing the personal 
firewall, wherein the n^affic events are organized based on a time associated 
therewith; 

tracing at least on^f the traffic events utilizing the personal firewall; 

and 

displaying a goographi^l map of t he trace on a world map u tilizing 
the personal firewall, 

wherein the at least one traffic event is traced in response to a user 
request. 



29. (Currently Amended) A computer program product for geographically 
tracing a traffic event utilizing a personal firewall, comprising: 

computer code for monitoring traffic events between a local computer 
and a remote computer over a network utilizingva personal firewall; 

computer code for displaying the traffic eyents in an event log 
utilizing the personal firewall, wherein the traffic e\f nts are organized based 
on a time associated therewith; 
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iputer code for tracing at least one of the traffic events utilizing 
the personal nr^all; and 

computer cbde for displaying a googrophical map of t he trace on a 
world map utilizing the p^^^onal firewall, 

wherein the at least onetra|Bc event is traced in response to a user 
request; 

wherein the trace is shown to involveVpluralitv of displayed network 
segments shown to be spanning different cities of^ifierent countries 
displayed on tihe world map . 



-8- 



PAGE 1 1/14 • RCVD AT 301/2004 5:43:01 PM [Eastern Standard Time] * 8VR:U8PTO-EFXRF-1/0 * DNI8:872fi306 * CSID:408 971 4660 « DURATION (mm-ss):04-18^ 



